Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
File: qDYJyI8427VIofAvif8pu20Yhk4.mft (raw, json)
Hash identifier: n/nZZ3TzrBIHEAjRwF+to72zvm0uHgSyh/R/A6P1arY=
Subject key identifier: 53:E0:1D:8D:F4:C0:68:65:35:1C:02:ED:41:98:4C:DB:1D:BB:C8:9D
Authority key identifier: A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
Certificate issuer: /CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Certificate serial: 019D273ABEE1ECC7E2F477CD3D78A7762C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
Manifest number: 0617
Signing time: Wed 25 Mar 2026 23:00:54 +0000
Manifest this update: Wed 25 Mar 2026 23:00:54 +0000
Manifest next update: Thu 26 Mar 2026 23:00:54 +0000
Files and hashes: 1: AeJUYs8KPvdeXojsNmXjmiR1Wh4.roa (hash: QZQFb9zgvngTfrMDFz4cGmkMiycjMvXPVgZGd4lxN9o=)
2: qDYJyI8427VIofAvif8pu20Yhk4.crl (hash: Ov6Yx9Xk9ojr3IYGfV4w8HMLh/BD07aH+tK21ZoVEvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:be:e1:ec:c7:e2:f4:77:cd:3d:78:a7:76:2c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Validity
Not Before: Mar 25 23:00:54 2026 GMT
Not After : Mar 26 23:00:54 2026 GMT
Subject: CN=53e01d8df4c06865351c02ed41984cdb1dbbc89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:96:8b:f9:81:ac:23:bb:29:bc:c0:b4:44:c6:
9b:4e:92:16:ad:f4:52:0c:d4:71:70:f4:74:d2:42:
4f:aa:61:96:7c:d7:06:a1:9c:44:ef:ae:58:90:65:
54:b5:97:eb:a2:ba:92:cd:65:ec:3c:42:32:e7:6f:
91:61:ca:52:69:b5:66:ff:8f:9f:10:6e:af:18:d5:
9e:b2:70:ad:ed:b7:0a:a2:64:8f:83:43:76:9f:65:
0d:a7:93:92:ed:9f:59:d4:aa:7b:02:c6:ff:fc:ab:
3c:84:da:07:05:29:f3:f4:62:47:ce:03:47:02:50:
9e:38:d1:e3:ef:89:78:da:f7:0c:ee:f5:12:63:d7:
fa:26:75:c7:60:4e:14:75:0a:c1:6e:30:9a:1f:b0:
9a:c1:b1:ca:8a:4f:2b:a7:9b:cd:2c:df:c1:1f:84:
13:e0:76:ae:1f:3b:0c:d4:45:f2:68:be:51:e2:b9:
29:9f:86:63:c9:98:74:b3:b5:4e:7a:19:9a:cc:42:
28:8e:35:b7:b3:1f:7d:27:5a:72:f3:55:99:b8:e2:
2b:25:ab:50:d2:71:50:0d:8d:d0:35:2c:02:14:4d:
f0:f8:ed:17:72:21:c9:2b:d7:49:83:97:ee:1a:0e:
5a:dd:6d:29:cb:b2:49:15:83:d3:e5:5f:98:1f:7b:
6a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E0:1D:8D:F4:C0:68:65:35:1C:02:ED:41:98:4C:DB:1D:BB:C8:9D
X509v3 Authority Key Identifier:
keyid:A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:55:e2:0e:e9:fc:6f:37:13:d7:b3:83:e1:7d:a7:90:3a:e9:
1f:d5:29:39:46:8f:0e:ee:55:03:4d:86:40:e1:8a:5f:11:6f:
d7:f7:d6:29:ad:6e:22:25:ab:0c:b2:61:36:b9:33:ae:07:08:
25:a0:2d:ab:e9:b7:7c:d6:6c:0c:f5:4a:bc:d1:cd:1a:13:67:
f8:1e:5e:6d:04:a3:c3:5d:b9:46:7c:80:0d:76:6e:e2:12:a6:
d9:f3:64:4a:26:02:06:e1:72:2d:b2:31:05:72:84:0f:75:59:
f6:d6:61:3c:ba:2b:29:0f:50:45:bb:99:af:e2:9d:b9:2c:f9:
83:52:bc:fd:9c:2d:a2:29:c7:2f:f2:a4:4b:4f:0f:3e:7e:41:
a6:2b:23:5a:12:2b:fc:c4:0d:3d:61:e5:2f:63:cd:cc:a1:d9:
21:70:da:e6:98:96:a5:9f:47:ce:9e:9f:0d:f2:cd:ae:1b:38:
9e:c0:54:69:87:de:91:ee:84:8b:5a:92:66:53:87:c4:d2:69:
30:6d:68:bb:42:ff:a4:b2:87:ce:c1:43:20:75:dc:4c:c7:d0:
d5:be:7b:99:06:66:8c:37:70:e9:ab:98:33:6f:22:1b:0b:5c:
4a:5a:6f:4a:9e:0c:4c:aa:7f:f4:3e:55:97:f8:3a:04:8a:71:
7f:18:ca:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOr7h7Mfi9HfNPXindiw+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MzYwOWM4OGYzOGRiYjU0OGExZjAyZjg5ZmYyOWJiNmQx
ODg2NGUwHhcNMjYwMzI1MjMwMDU0WhcNMjYwMzI2MjMwMDU0WjAzMTEwLwYDVQQD
Eyg1M2UwMWQ4ZGY0YzA2ODY1MzUxYzAyZWQ0MTk4NGNkYjFkYmJjODlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZaL+YGsI7spvMC0RMabTpIWrfRS
DNRxcPR00kJPqmGWfNcGoZxE765YkGVUtZfrorqSzWXsPEIy52+RYcpSabVm/4+f
EG6vGNWesnCt7bcKomSPg0N2n2UNp5OS7Z9Z1Kp7Asb//Ks8hNoHBSnz9GJHzgNH
AlCeONHj74l42vcM7vUSY9f6JnXHYE4UdQrBbjCaH7CawbHKik8rp5vNLN/BH4QT
4HauHzsM1EXyaL5R4rkpn4ZjyZh0s7VOehmazEIojjW3sx99J1py81WZuOIrJatQ
0nFQDY3QNSwCFE3w+O0XciHJK9dJg5fuGg5a3W0py7JJFYPT5V+YH3tqfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPgHY30wGhlNRwC7UGYTNsdu8idMB8GA1UdIwQY
MBaAFKg2CciPONu1SKHwL4n/KbttGIZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcURZSnlJODQyN1ZJb2ZBdmlmOHB1MjBZaGs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lMTRmZTEtNjJhYi00NDE1LTliY2Ut
ZTQwZmUwYjA5NGIwLzEvcURZSnlJODQyN1ZJb2ZBdmlmOHB1MjBZaGs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9lMTRmZTEtNjJhYi00NDE1LTliY2UtZTQwZmUwYjA5NGIw
LzEvcURZSnlJODQyN1ZJb2ZBdmlmOHB1MjBZaGs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlXiDun8
bzcT17OD4X2nkDrpH9UpOUaPDu5VA02GQOGKXxFv1/fWKa1uIiWrDLJhNrkzrgcI
JaAtq+m3fNZsDPVKvNHNGhNn+B5ebQSjw125RnyADXZu4hKm2fNkSiYCBuFyLbIx
BXKED3VZ9tZhPLorKQ9QRbuZr+KduSz5g1K8/ZwtoinHL/KkS08PPn5BpisjWhIr
/MQNPWHlL2PNzKHZIXDa5piWpZ9Hzp6fDfLNrhs4nsBUaYfeke6Ei1qSZlOHxNJp
MG1ou0L/pLKHzsFDIHXcTMfQ1b57mQZmjDdw6auYM28iGwtcSlpvSp4MTKp/9D5V
l/g6BIpxfxjK3Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:03 2026 by rpki-client